diff options
| author | Ermal <eri@pfsense.org> | 2011-11-10 19:31:01 +0000 |
|---|---|---|
| committer | Ermal <eri@pfsense.org> | 2011-11-10 19:31:20 +0000 |
| commit | 612d5d31a66d33185eb150ba9107d641930c5332 (patch) | |
| tree | 47a559b5c01e83c679df0e91e5a6a65e17e03fe3 /config/snort/snort_check_for_rule_updates.php | |
| parent | 40eb9111c2d6ac52dd90b776784703974fb63372 (diff) | |
| download | pfsense-packages-612d5d31a66d33185eb150ba9107d641930c5332.tar.gz pfsense-packages-612d5d31a66d33185eb150ba9107d641930c5332.tar.bz2 pfsense-packages-612d5d31a66d33185eb150ba9107d641930c5332.zip | |
Run snort as root user in pfSense this does not change much and allows to reload snort rather than stop start it.
Diffstat (limited to 'config/snort/snort_check_for_rule_updates.php')
| -rw-r--r-- | config/snort/snort_check_for_rule_updates.php | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/config/snort/snort_check_for_rule_updates.php b/config/snort/snort_check_for_rule_updates.php index c936db9d..5043a624 100644 --- a/config/snort/snort_check_for_rule_updates.php +++ b/config/snort/snort_check_for_rule_updates.php @@ -669,10 +669,12 @@ if (is_dir('/usr/local/etc/snort/tmp')) { exec("/bin/rm -r /usr/local/etc/snort/tmp/rules_bk"); } -/* make all dirs snorts */ +/* XXX: These are needed if snort is run as snort user mwexec("/usr/sbin/chown -R snort:snort /var/log/snort", true); mwexec("/usr/sbin/chown -R snort:snort /usr/local/etc/snort", true); mwexec("/usr/sbin/chown -R snort:snort /usr/local/lib/snort", true); +*/ +/* make all dirs snorts */ mwexec("/bin/chmod -R 755 /var/log/snort", true); mwexec("/bin/chmod -R 755 /usr/local/etc/snort", true); mwexec("/bin/chmod -R 755 /usr/local/lib/snort", true); |